Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
File:                     h2h0NgiWQiWeHHlERxdaLHZY6qw.mft (raw, json)
Hash identifier:          lrDoxrAKmZUDqOeiPDYZoNA2nDiMU5eDwoJIU73zkK4=
Subject key identifier:   2E:8E:16:5F:96:C7:23:C8:EB:A2:64:63:8E:83:B7:12:8C:AB:0F:1E
Authority key identifier: 87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
Certificate issuer:       /CN=F3616EA4AF/serialNumber=87687436089642259E1C794447175A2C7658EAAC
Certificate serial:       0158
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
Manifest number:          0155
Signing time:             Fri 17 Apr 2026 04:51:46 +0000
Manifest this update:     Fri 17 Apr 2026 04:51:45 +0000
Manifest next update:     Sun 19 Apr 2026 04:51:45 +0000
Files and hashes:         1: h2h0NgiWQiWeHHlERxdaLHZY6qw.crl (hash: TkQMqsghDI7BmczoHXRTlKm2eA/B4euNLAXyunOUw7o=)
                          2: 60A315E6417711F0BAB45C7CDAE4EC9C.roa (hash: 1DDIa6aslINFzcXNYReTt3YTJSjzz9Bz8PpNSRKmn4s=)
                          3: 8ABD40685DBA11F0882F677FDAE4EC9C.roa (hash: LtTHAsI+8AgzrnAlcOiN9VsFsRmyEiAm6n6J+entv6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 04:51:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616EA4AF, serialNumber=87687436089642259E1C794447175A2C7658EAAC
        Validity
            Not Before: Apr 17 04:51:45 2026 GMT
            Not After : Apr 19 04:51:45 2026 GMT
        Subject: CN=69e1bc62-1be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:04:7e:fe:3e:6c:95:b0:97:52:e6:b7:59:
                    f6:7e:c3:81:db:8d:27:36:28:e1:1d:22:d1:d4:69:
                    5d:54:21:6f:01:0c:61:28:5d:cb:b4:73:d3:79:0f:
                    cb:d0:a9:8c:b5:5b:a8:d0:67:40:fa:8c:41:bf:a6:
                    2a:71:1f:96:2d:b3:78:ae:e0:0e:a2:d9:00:10:f0:
                    29:b3:92:de:d1:fd:23:ce:5e:f2:25:8c:6c:39:84:
                    7b:71:71:4b:ed:95:cd:71:55:8e:36:5b:4d:85:2b:
                    f5:f8:10:69:01:ea:c3:23:b2:54:c6:2b:3d:ad:8f:
                    46:38:f4:6f:33:25:91:3e:33:ff:ed:51:69:0d:a2:
                    ef:f8:f6:27:dc:cd:29:8a:45:b6:d5:11:f0:9e:a8:
                    3d:13:21:35:9b:e6:c8:75:da:37:6c:35:70:cf:b7:
                    22:fa:9f:cf:4f:68:f1:85:8f:3d:2a:a4:e6:6a:05:
                    fe:7a:3f:bf:ff:77:5b:c4:0c:dc:ae:f3:1f:97:e3:
                    6d:6e:83:df:13:10:d9:0a:52:75:32:64:ea:53:5a:
                    c4:f1:3d:bc:c6:73:5d:db:91:c9:46:8f:0b:8f:30:
                    a0:0a:d4:5b:62:8f:6b:9d:19:cc:92:50:db:94:09:
                    30:f0:02:3c:b1:45:60:8b:22:c0:b4:f2:cb:b7:51:
                    f1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8E:16:5F:96:C7:23:C8:EB:A2:64:63:8E:83:B7:12:8C:AB:0F:1E
            X509v3 Authority Key Identifier:
                keyid:87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:a2:84:4e:20:9e:9c:1a:b6:05:f2:08:ae:6f:8e:54:21:06:
         94:36:24:e8:9b:3e:32:bd:8c:11:e5:7b:14:29:f9:d4:4f:12:
         84:58:f6:21:de:b7:4e:d1:1a:ca:96:77:4b:55:b3:20:fe:f2:
         54:06:bc:6d:1e:97:ed:44:82:a2:aa:8f:9d:70:2d:ee:68:7d:
         02:06:b7:6f:9f:9e:a6:8a:46:c2:f4:ac:06:6d:c2:ff:90:15:
         7c:01:b5:72:f8:23:7c:a4:dd:ce:f0:ca:cf:5a:88:e6:60:01:
         5c:e5:46:c8:9b:a1:e7:de:04:54:19:6d:c3:4e:4d:3a:b5:1c:
         66:81:6f:83:c2:38:ea:25:0d:ff:f8:c1:4d:da:f4:56:b1:9d:
         28:19:94:27:2f:9e:72:08:9d:02:38:5c:24:23:cc:e0:96:78:
         e4:38:bc:7e:a3:4c:5f:34:7d:1c:6c:13:25:df:e9:16:f2:b5:
         54:e9:55:d7:98:85:1e:81:45:0d:61:81:53:4e:ca:2a:65:3d:
         89:b5:90:9f:4c:12:8b:af:21:f0:4a:ac:51:9c:bb:55:4b:30:
         6d:aa:e0:e9:a9:a1:4a:d0:f7:e4:b5:70:a1:1e:a8:e7:18:dd:
         25:af:9f:10:75:d5:d9:b3:e4:c9:59:84:ad:90:50:81:9a:a2:
         3d:ac:c5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:18:39 2026 by rpki-client